If you
use a dedicated syslog server you can use the capabilities of that OS (maybe
with additional freeware tools) to establish your own alerting and logging
scenario.
FW-1
on Unix would offer you a broad range of capabilities, which you can use on the
firewall directly. If you want to go with the PIX, I would suggest a dedicated
syslog server.
We use
a FW1 on Solaris and we combined the capabilities of both, FW1 and
Solaris.
:-)Horst
-----Urspr�ngliche Nachricht-----
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Im Auftrag von Johnston Mark
Gesendet: Dienstag, 29. Mai 2001 10:41
An: [EMAIL PROTECTED]
Betreff: Cisco and FW -1
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Im Auftrag von Johnston Mark
Gesendet: Dienstag, 29. Mai 2001 10:41
An: [EMAIL PROTECTED]
Betreff: Cisco and FW -1
Hi all,
Need some help from persons who have knowledge about FW-1 and Cisco Pix.
We are looking to replace our FW as its currently limited to 3 interfaces and we now have a requirement for 4. But before purchasing the unit there is just a little bit of information that I need to know, more on the alerting and logging capabilities of the 2 suggested firewalls.
From most of the whitepapers I have read (the honeypot project etc) I noticed that most use FW-1. I know that it can handle logging and custom alerts quite well, but can Cisco. I have had mixed vendor reports and sometimes I think that those guys will say anything to get a sale .... so let me rather ask persons who have 1st hand experience.
Thanks
Mark
